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Te Introduction 


There are three commonty used hcs_ primitives which attempt to 
return the calfer*s mode of access to a branche Today, this mode 
is the raw mode from the ACL of the oranche The raw mode 
currently can be misteading to the user since it does not account 
for ring brackets. | 


The Access [solation Mechanism witd make the raw ACL mode even 
more misleading to the user. The’ foldowing changes to the three 
orimitives are proposed to. provide the user process with mode 
information which is both correct and upward compatible with 
existing software. 


Ile hes_$star_list_ 


This primitive returns a structure contalning a mode fletd for 
each branch which matches the star name. There is no. field in 
the structure for ring bracket data. Therefore, the user would 
have to make a separate call to properiy determine his access. 


The mode returned in this structure should be changed to the 
user*s effective mode at his current vatidation fevei.€ The 
effective mode would be a combination of ACL modey ring brackets 
and Access Isolation restrictions al! factored together. 


ThIls willl ensure that programs which make decisions based on the 


mode data in the structure wlil work correctly. Tf these 
programs atreacy obtain the ring bracket data to property 
determine access, they will stil! get the same answer, but also 


consistent with the Access Isolation Mechanism. Hence, fhis 
change Is upward compatiblie. 
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Programs which report the mode data in the structure to the -user 
{eede, the Fist command) will now report the correct mode for the 
process at his current validation tevel. More detailed access 
Information will stil! be avallable to the process through other 
primitives or by the use of commands. 


IIT. hes_$status_ 


This primitive returns a structure for a specified branch. The 
structure contains the calter*s raw ACL mode without factoring in 
the ring brackets or returning the ring bracket data. 


The mode returned in this structure should also be changed to the 
effective mode as described above. This change will also be 
Upward comoatibtle for the same reasonse 


IVe hes_tstatus_long 


This primitive also returns a structure for a specified branch. 
The structure contains both mode and ring bracket fletds. SBefore 
the addition of the Access Isolation Mechanism, this data was 
sufficient for the user to determine his access to the branche 
Now this is not the casee The size of the structure does not 
provide space for the branch access class to be included and fhe 
lenath cannot be increased for compatability reasons. 


Therefore, the mode data currentiy returned shoutd also be 
changed to the calter's effective mode. [In addition, the 13 olt 
pad field of the structure can be changed to provide the raw ACL 
mode (this will teave an 8 bit pad). The raw mode data will be 
useful for status reporting (eedee In the status command). 


This change Is atso upwards compatible for programs making 
decisions based on access data and programs which need the raw 
ACL mode can be triviatty modifled to use if. 


Ve Other hes_ orimitives 


The primitive hes_$fs_get_mode returns the calfer*s effective 
mode at his current validation tlevel. The effective mode wilt 
stlti be returned, but with the Access Isolation restrictions 
factored ine 


The orimitive hcs_$status is not calfed by any system software. 
tt returns directory Information in a packed structure. Tnis 
primitive is not a documented user interface and should be 


deleted. 
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The primitive hes_Slist_dir is only used by backup _dump_recurse. 
The mode returned In its packed structure Is thus backup*s mode 
to the branch. Since backup is running in ring 1 when it caits 
hes_tiist_dir, it can believe the mode data for seaqment branches. 
The mode is not currently used for access decisions by backup. 
However, for consistency, the mode should have the Access 
Isotation restrictions factored Ine This wlff hetp to avoid 
mis-iInterpretation in future changes or in ofher programs which 
may be designed to call this primitive. 


VI.e Note on Compatibility 


These changes have been designed to property integrate the Access 
Tsotation Mechanism into existing primitives and to minimize the 
Impact. on current user software. For Installations operating at 
a sIngte access class, fhe changes will be invisibie except for 
ring oracket factoringe At af! tinstaftlations, fhe Information 
returned by the primitives will be correct and complete. 


Programs which report or save Information about branch status 
must be changed eventually to include the branch access classe 
The returned structures mentioned in this MTB. will not be changed 


to inctude this data for compatibility reasons. New primitives 
will be provided for this purpose. 


Tf these changes cause major problems for any user, please caill? 


Jerry Whitmore or Andy Kobziar 
494-7300 &91-6300 


or send MIT mail to? 


WhitmoreeMPLS or KobziareMPLS 
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